client not able to connect to 9800 wlc-wireless

[Anjana A]

Hello Team,

we are using new 9800 wlc in our infra

WLC-9800/ios-17.9.4a

AP-Mode:Flex-connect 

AAA server-ise

All of sudden all clients from one particular not able to connect to wireless -corporate ssid.

Clients struck in 802.1x state and error is 

2024/03/27 03:20:25.621904275 {wncd_x_R0-0}{1}: [client-keymgmt] [17614]: (ERR): MAC: xxxxxxxxxxx  Keymgmt: Failed to validate eapol mic. MIC mismatch.
2024/03/27 03:20:25.621909925 {wncd_x_R0-0}{1}: [client-keymgmt] [17614]: (ERR): MAC: xxxxxxxxx

  Keymgmt: Failed to validate eapol key m2. 11r MIC validation failed
2. Reason: CO_CLIENT_DELETE_REASON_KEY_MGMT_MIC_VALIDATION, details: , fsm-state transition 

Please confirm what needs to be checked on device end?

Regards,

Anjana

[MHM Cisco World]

https://bst.cisco.com/quickview/bug/CSCwa51150

MHM

[Anjana A]

we are running 3.2 ise version and bug is 3.1 version

[marce1000]

 - Also https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvs38655 , if not applicable and or following an earlier bug report mentioned , then you need to report back to TAC , 

 M.

[MHM Cisco World]

Sorry I make you waiting 

Can you check PSK ypu use in both wlc and wifi host' this log can indicate mismatch key

MHM

[Anjana A]

No Issues MHM..

Actually we have upgrade the ios to 17.9.5 which resolved the issue.

Regards,

Anjana

[MHM Cisco World]

Thanks alot for update me

Have a nice day 

MHM

[mgalvez2022]

Is there a work around to this? I have this issue with a flex connect site as well, and I cannot update this controller yet, and It will take a while to get an approval to upgrade.